Hi!

 

I was searching for a while for a solution to my problem and tun/tap
might be this solution. I have to admit that I haven't worked with it
yet.

 

Here is what I am looking for:

 

We have an OpenVPN network (which already uses a TAP driver). Within
this network, we have several clients, let’s say addresses from
192.168.0.1 to 192.168.0.255. These clients try to access ip addresses
e.g. 192.168.1.1 to 192.168.1.255. 

 

The problem is, that the latter addresses are purely virtual. We want to
create the "illusion" that there are real devices that for example
answer to SNMP requests. Physically, there is only one server in this
network segment.

 

I think, the TUN/TAP driver can be configured to accept all requests on
specified ip addresses and deliver them unchanged (no forwarding by
replacing the IP address etc.) to the operating system. 

 

On this system, e.g. a Java ServerSocket waits on a port on an anycast
address to accept all local ip addresses. I've tested it by simply
adding ip addresses to an existing physical NIC.

 

Now, the question is, 

1.) is it possible to configure the tun/tap driver to do this, i.e.
representing multiple IP addresses that can be used in the application
layer? 

2.) If yes, could you give an example how to do this (if its very easy)
or point me to the part of the documentation? 

3.) Would you recommend a configuration file or can this be changed
dynamically?

 

Moreover, 

4.) is it possible to set wildcards for IP segments like 192.168.1.*
instead of adding ip addresses one by one? This is important and leads
to the next question:

5.) Is it possible to have something like e.g. 10,000 IP addresses
connected to a single TUN/TAP driver? Will this require a lot of
performance or is simply an entry in a table and respectively a lookup
in this table for every incoming packet?

 

Thank you very much! Any comments are appreciated!

 

Jan

 


------------------------------------------------------------------------------
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev 
_______________________________________________
Vtun-Users mailing list
Vtun-Users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/vtun-users

Reply via email to